Read the docs

0xdps

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

0xdps records in CISA KEV

No 0xdps vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-84851 CVE-2026-121730 · GHSA-7mvm-jcxm-mh2j

emailflare Missing Authorization via Inbox Compose Endpoint

Priority LOW 31

emailflare before commit cf31f33 contains a missing authorization vulnerability in POST /api/inbox/compose that allows authenticated members to send mail as any sender address.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.0022 Published 2026-11-03 Fixed CWE-862
TI-2026-84850 CVE-2026-121729 · GHSA-q8jv-62h2-mqmf

emailflare Missing Authorization on /api/keys Routes

Priority LOW 31

emailflare before commit cf31f33 contains a missing authorization vulnerability in the inbox service /api/keys routes that allows any authenticated member to list, create and revoke API keys.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00247 Published 2026-11-03 Fixed CWE-862
Open these records in search →